emilandClaude Sonnet 4.6
9bc2d65b43
router.push() can reuse a cached middleware redirect that was issued before the cookie was set, sending the user back to /login. window.location.href forces a fresh browser request that carries the newly set access_token cookie. Also changed SameSite=Strict -> SameSite=Lax so the cookie is included in all same-site navigation patterns. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
65 lines
2.0 KiB
TypeScript
65 lines
2.0 KiB
TypeScript
// Global client state managed with Zustand.
|
|
// Only truly global state lives here: auth tokens and the current user profile.
|
|
// Local UI state (loading flags, form values) stays in component useState.
|
|
|
|
import { create } from 'zustand';
|
|
import { persist } from 'zustand/middleware';
|
|
import type { User } from './types';
|
|
|
|
interface AuthState {
|
|
accessToken: string | null;
|
|
refreshToken: string | null;
|
|
user: User | null;
|
|
setTokens: (access: string, refresh: string) => void;
|
|
setUser: (user: User) => void;
|
|
updateBalance: (newBalance: number) => void;
|
|
logout: () => void;
|
|
}
|
|
|
|
/** Writes the access token to localStorage and to a short-lived cookie so
|
|
* Next.js middleware (edge runtime) can read it for role-based redirects. */
|
|
function persistToken(accessToken: string): void {
|
|
if (typeof window === 'undefined') return;
|
|
localStorage.setItem('access_token', accessToken);
|
|
// 15 min lifetime matches the default JWT_ACCESS_TTL
|
|
document.cookie = `access_token=${accessToken}; path=/; SameSite=Lax; max-age=900`;
|
|
}
|
|
|
|
export const useAuthStore = create<AuthState>()(
|
|
persist(
|
|
(set, get) => ({
|
|
accessToken: null,
|
|
refreshToken: null,
|
|
user: null,
|
|
|
|
setTokens: (accessToken, refreshToken) => {
|
|
persistToken(accessToken);
|
|
if (typeof window !== 'undefined') {
|
|
localStorage.setItem('refresh_token', refreshToken);
|
|
}
|
|
set({ accessToken, refreshToken });
|
|
},
|
|
|
|
setUser: (user) => set({ user }),
|
|
|
|
updateBalance: (newBalance) => {
|
|
const { user } = get();
|
|
if (user) set({ user: { ...user, balance: newBalance } });
|
|
},
|
|
|
|
logout: () => {
|
|
if (typeof window !== 'undefined') {
|
|
localStorage.removeItem('access_token');
|
|
localStorage.removeItem('refresh_token');
|
|
document.cookie = 'access_token=; path=/; max-age=0';
|
|
}
|
|
set({ accessToken: null, refreshToken: null, user: null });
|
|
if (typeof window !== 'undefined') {
|
|
window.location.href = '/login';
|
|
}
|
|
},
|
|
}),
|
|
{ name: 'cu-points-auth' }
|
|
)
|
|
);
|